How Many Levels Your Master Key System Actually Needs

Almost every inquiry we get about master keying opens the same way: "can you do master key?" The answer is yes, and it is not useful, because master keying is not a feature a cylinder either has or lacks. It is a plan (a map of who may open what) and the cylinders are cut afterwards to match the plan. The question that actually moves an order forward is how many levels that plan has.

The vocabulary is worth getting straight, because the abbreviations are used loosely and they are not interchangeable. A change key (CK) opens one lock and nothing else, the key a tenant or an office occupant carries. A master key (MK) opens every lock in one defined group: a floor, a wing, a department. A grand master key (GMK) opens several groups. A great grand master key (GGMK) sits above those. Between them sit the management levels a facilities team actually uses day to day, the cleaner who needs every room on two floors but no plant room, the maintenance contractor who needs plant rooms across the whole site and no offices.

We build to five levels, from GGMK down to the change key, with four tiers of management keying between the top and the individual lock. That is the ceiling, not the recommendation. Most buildings we quote need three: a change key per door, a master per floor or department, and one grand master for the building manager. Specifying five levels for a building that needs three does not add security, it adds cross-keying complexity, and every additional level narrows the number of distinct key cuts available below it.

That last point is the one most often missed, and it is arithmetic rather than opinion. A cylinder has a fixed number of pin positions and a fixed number of depths per position, so the total number of distinct keys is finite. Every master level consumes some of that space, because a master key works by adding a second shear line in the pin stack, and each added shear line reduces how many change keys can remain unique underneath. A five-level system in a small building is not more secure than a three-level one; it is a three-level building with fewer available combinations and more keys that accidentally fit more than they should.

So the design starts from the building, not from the hardware. What we need to draw a system is the door schedule with a line per door, and for each door: who must be able to open it, and which group it belongs to. That is usually a spreadsheet the facilities manager already has. From it we produce a keying chart (every door, every key that opens it, and the total key count) and that chart is what gets approved before a single cylinder is pinned.

Two practical constraints worth raising before the chart, because they change it. First, all cylinders in one system must be the same keyway, and that keyway has to be decided at the start, a system cannot be extended later with cylinders from a different profile. Second, decide early how many keys each level needs, including spares held by the building owner. Cutting additional keys to an existing system later is straightforward; discovering that the chart never allowed for the night cleaner is not.

Our cylinders are solid brass, in euro profile. The catalog carries them in nine overall lengths (45, 47, 54, 56, 60, 65, 70, 80 and 90mm (3-9/16")) and the length is the leading figure of the model number, which is how the factory names them. Ask us to confirm the exact overall length for the model you settle on: only ten of the forty-five published cylinders state it as a specification row, and on the rest the model number is the only thing carrying it. Overall length is also not the split: a 70mm (2-3/4") cylinder can be 35/35, 30/40 or 40/30, and which one fits depends on your door. That is a separate decision from the keying plan and it is explained in our note on cylinder length and split, but the two arrive together on the same order, so it is worth measuring while you draw the chart.

The chart itself

Here is the hierarchy as a chart, because that is what people are actually looking for when they search for one. Read it downward: each level opens everything below it and nothing above it.

Two labels sit outside the hierarchy and are constantly confused with it. Keyed alike (KA) means several locks share one change key, two doors into the same office, or a run of identical store cupboards. It is not a level; it is a decision made at the bottom of the chart. Keyed different (KD) is the default: every lock has its own change key.

A maison key is the other one worth naming. It is a key that a lock accepts in addition to its own, the classic case being a main entrance that every flat key must open. Maison working is a property of the lock, not of the key, and it is specified per door rather than per level.

A worked example, so the chart has a shape

Take a four-storey office building with a ground-floor reception, three tenant floors, a plant room, and a cleaners' store on each floor. The system that fits it is four levels, not five:

Nobody in that building needs a GGMK, because there is only one building. Adding the sixth line (a GGMK above the owner's GMK) costs pin space on every cylinder in the system and buys nothing until there is a second building. That is the whole argument for designing down rather than up.

What each level costs you in pin space

The arithmetic in the previous section is not abstract, and it is worth stating as a rule of thumb rather than a formula. Every level above the change key needs at least one extra split in the pin stack of every cylinder that the level must open. Splits are what make a cylinder pickable and what make it wear unevenly, so the count matters to security and to service life, not only to whether the system can be drawn at all.

The practical consequence: a five-level system on a six-pin cylinder leaves very little room for future doors. If the building will grow, the honest move is to use fewer levels now and leave depth unspent, rather than to design the maximum system and discover in year three that no more keys can be cut in it.

This is also why we ask for the schedule before quoting rather than after. A system is not a product we take off a shelf; it is a chart drawn against a specific building, and a chart drawn against the wrong building cannot be corrected later without recutting every cylinder in it.

What you get back, and why it has to be kept

The deliverable is not a box of cylinders. It is a key schedule: one row per door, naming the door, the cylinder, which levels open it, and how many change keys were cut. Alongside it sits the bitting list, the actual pin depths behind every key in the system.

Keep both, and keep them somewhere that survives a change of facilities manager. A master key system whose chart has been lost is not a master key system any more; it is a set of cylinders nobody can extend, because the next key has to be cut into a scheme that no longer exists on paper. Rebuilding a lost chart means pulling and reading cylinders one at a time, and on a large building that costs more than the original system did.

Send the door schedule and say how many levels you think you need. If the schedule suggests fewer, we will say so: a system with one level more than the building uses is a cost and a complication that shows up years later, when somebody has to explain why a key opens a door it should not. And if the building is likely to grow, say that too, because spare capacity has to be designed in at the start.